{"id":"W4309529433","doi":"10.1145/3571848","title":"On the Discoverability of npm Vulnerabilities in Node.js Projects","year":2022,"lang":"en","type":"article","venue":"ACM Transactions on Software Engineering and Methodology","topic":"Software Engineering Research","field":"Computer Science","cited_by":15,"is_retracted":false,"has_abstract":true,"ca_institutions":"Queen's University; Concordia University","funders":"","keywords":"Discoverability; Computer science; Dependency (UML); Vulnerability (computing); Computer security; World Wide Web; Software engineering","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.01183653,0.0003482178,0.0002410978,0.008141704,0.001124799,0.00151825,0.0007821352,0.0008837365,0.001582296],"category_scores_gemma":[0.09871123,0.0003596135,0.0004966157,0.004843012,0.002073622,0.004311473,0.002453052,0.001317187,0.0002585945],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001292786,"about_ca_system_score_gemma":0.00144213,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.009378598,"about_ca_topic_score_gemma":0.01795731,"domain_scores_codex":[0.9916524,0.00198432,0.0008945594,0.001255542,0.003366329,0.0008467596],"domain_scores_gemma":[0.6846758,0.2317163,0.06144357,0.008010489,0.01146555,0.002688448],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.00007613163,0.0001174635,0.980904,0.00008018626,0.0000368916,0.0003514042,0.003455059,0.001513526,0.0008238605,0.0007058804,0.0002904297,0.01164521],"study_design_scores_gemma":[0.000004800615,0.0001209751,0.9867435,0.00006219194,0.00003124393,0.0004988566,0.003031611,0.006932143,0.0009025509,0.0008802328,0.0007698279,0.00002200788],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9977599,0.00008626396,0.0007491445,0.0001237354,0.000001641087,0.0000179421,0.000192602,0.00002673212,0.001041983],"genre_scores_gemma":[0.9982805,0.0000978716,0.001045167,0.00001820075,0.000004502725,0.00002199566,0.0003086713,0.00001595243,0.000207164],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.01183653,"threshold_uncertainty_score":0.06259829,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0900358588716811,"score_gpt":0.3147622559724983,"score_spread":0.2247263971008172,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}